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7776 MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )[3 Responsive to communication(s) filed on 06 September 2000 . 
2a)D This action is FINAL. 2b)M This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) S Claim(s) 1-16 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1-16 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 06 September 2000 is/are: a)l3 accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

11) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) 13 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or(f). 

a)lEAII b)D Some*c)D None of: 

1 Certified copies of the priority documents have been received. 

2.M Certified copies of the priority documents have been received in Application No. PCT/FR98/02918 . 

3.S Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 
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Art Unit: 2172 

DETAILED ACTION 

Claim Rejections » 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-6 and 9-14 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Powers (US 5,655,020). 

a. Referring to claims 1 and 9: 
i. Powers teaches: 

(1) receiving a code [i.e., receiving a first code 
comprising a plurality of characters in sequential positions identifying the 
authorized person (column 2, lines 44-45)]; 

(2) verifying a first entitlement for accessing a first 
function (180), and as determined by a first code [i.e., as shown in Figure 2a, step 20 
is to look up, that is "to verify" pin 1, that is, "determined by a first code"]; 

(3) authorizing access to the first function (180) if the first 
entitlement is recognized [as shown in Figure 2a, step 20a found decision can 
include "authorizing access to the first function if the first code is recognized"]; 
and 

(4) if the first entitlement is not recognized, using the 
code to verify a second entitlement as determined by a second code that is different 
from the first code, to trigger at least one second function (170) without revealing the 
fact that the code does not make it possible to obtain the first entitlement [i.e., 
receiving a second code comprising a plurality of characters in sequential 
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positions obtained from an actual user; comparing the characters of the second 
code with the characters in corresponding positions of the first code to determine 
identity between the codes in all but one of the character positions (column 2, 
lines 46*51)]; 

(5) the method being characterized in that the step of 
verifying the second entitlement comprises the operations consisting in: obtaining a new 
code from the first code by means of a second transformation (140) that is the inverse 
of a first simple transformation that enables the holder of the first code to obtain the 
second code from the first code; and testing the new code by performing again the step 
of verifying the first entitlement [i.e., receiving a first code comprising a plurality of 
characters in sequential positions identifying the authorized person; receiving a 
second code comprising a plurality of characters in sequential positions obtained 
from an actual user, the second code having more characters than the first code; 
comparing the characters of the second code with the characters of the first code 
to determine whether the second code contains a sequence of characters in the 
same order as the sequence in the first code (column 3, lines 15-21)]; 

b. Referring to claims 2 and 10: 
i. Powers teaches: 

(1) characterized by the fact that said first simple 
transformation is performed by a unit shift of one character of the first code [i.e., a user 
will be instructed to deliberately alter one character in his personal identification 
number before he uses it (column 3, lines 48-50)]. 

c. Referring to claim 3: 

L Powers teaches: 

(1) characterized by the fact that the steps consists in 
verifying the first and second entitlements make use of digitally-recorded user profile 
[i.e., as shown in Figure 1, in the memory 10 there is stored a databank having a 
plurality of files, bach file being identifiable by data derived from the credit card, 
that is "digitally-recorded user profile", and containing permitted user data 
including a personal identification number and additional user data such as the 
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permitted user's address, telephone number, age, date of birth etc (column 5, 
lines 36-41)]. 

d. Referring to claims 4 and 12: 
i. Powers teaches: 

(1) characterized by the fact that the second function 
(170) consists in displaying a message selected randomly from a plurality of messages 
stating that access to the first function (180) is not possible, without specifying that the 
code is not the right code for obtaining the first entitlement [i.e., as shown in Figure 2a, 
at step 21, the length of the PIN (PIN 2) offered by the user is compared with the 
authentic PIN (PIN 1) and if the number of characters is not the same the 
transaction is rejected, wherein the displaying a message is inherently provided, 
(column 5, lines 59-62)]. 

e. Referring to claim 5: 

i. Powers teaches: 

(1 ) characterized by the fact that the first function (1 80) is 
a bank transaction [i.e., in step 20 data is derived from a credit card offered for use 
via the magnetic stripe reader 2, that is, "a bank transaction", and is passed to 
the controller 8 to cause the PIN (PIN 1) associated with the permitted user of that 
credit card to be located (column 5, lines 51-55)]. 

f. Referring to claims 6 and 14: 
i. Powers teaches: 

(1) characterized by the fact that it further comprises a 
disabling step (200) if the step that consists in verifying whether the first entitlement has 
been tested more than a determined number of times without success [i.e., if a 
sequence of characters has been located in the second code (PIN2) 
corresponding to the first code (PIN1) the computer system then checks at step 
228 to see whether or not that version of the personal identification number has 
already been used within a predetermined time period. If it has been used then 
the transaction is rejected (column 7, lines 5-9)]. 

g. Referring to claim 1 1: 
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i. Powers teaches: 

(1) characterized by the fact that it is used for making a 
banking transaction secure [i.e., as one example of "banking transaction secure", 
the retailer then enters the version of the personal identification number offered 
by the customer into the computer system and awaits an authentication or invalid 
signal. Alternatively, the customer enters the number himself. If the version of 
the personal identification number which has been offered differs from the 
correct personal identification number according to a predetermined corruption 
algorithm and if that version of the personal identification number has not already 
been used within a predetermined time period the computer system will indicate 
that the user is authenticated. In other circumstances the computer system will 
produce a transaction invalid signal and this will prompt the retailer to ask further 
questions of the customer concerning personal details relating to the permitted 
user of the card (column 5, lines 15-28)]. 

h. Referring to claim 13: 

i. This claim has limitations that is similar to those of claim 5, 
thus it is rejected with the same rationale applied against claim 5 above. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 7-8 and 15-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Powers, and further in view of Lichty (US 4, 774,500). 

a. Referring to claims 7 and 8: 

i. Powers teaches the claimed subject matter except for: 

(1) characterized by the fact that the steps consisting in 
verifying the first and second entitlements make use of a microprocessor card (10) . 
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(2) characterized by the fact that the second simple 
transformation (140) is itself a function of parameters that are accessible on the 
microprocessor card (10). 

ii. Lichty teaches: 

(1) when the microprocessor cards are issued to 
individual users, a validation procedure is executed on a validating terminal. The 
procedure generally requires the issuer to enter the correct manufacturers' assigned key 
number in order to confirm that the card is authorized. A PIN is then assigned to or 
selected by the cardholder and stored in the secret zone. Upon completion of the 
validation procedure, the card MPU irreversibly alters its program so that the words 
written in the secret memory zone cannot be altered. Thereafter, upon using the card, a 
user must enter the correct PIN in order to confirm that the card is being used by its 
authorized user (column 6, lines 65-68 through column 7, lines 1-9). 

(2) a useful development in account cards has been to 
incorporate a magnetic, semiconductor, or optically written memory for storing account 
information, current balances, or other user information in the card itself (column 1, 26- 
29). 

iii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1 ) apply such microprocessor card in Power's recited 
elements because such memory cards allow the user to access distributed terminals for 
off-line transactions, by reading and/or updating the stored information, without needing 
to have the transaction validated through a central system (column 1, lines 30-34 of 
Lichty). 

iv. The ordinary skilled person would have been motivated to: 
(1) include such microprocessor card in Power's recited 

elements since account cards having on-board memories can be made secure against 
data tampering by using a storage medium which is non-erasable, i.e. data is written 
once on the card and cannot be erased or changed (column 1, lines 39-42 of Lichty). 
b. Referring to claims 15 and 16: 
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L These claims have limitations that is similar to those of 
claims 7 and 8, thus it is rejected with the same rationale applied against claims 7 and 8 
above. 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Parrillo (US 5,239,583) discloses an improvement in structure and 
credit account access security employing method and means for ensuring that repeating 
an exact access code which was successful in accessing the account, will be 
unsuccessful at the next or subsequent tries (see abstract). 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thanhnga (Tanya) Truong 
whose telephone number is 703-305-0327. 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on 703-305-4393. The fax and 
phone numbers for the organization where this application or proceeding is assigned 
are 703-872-9306 for regular communications and 703-746-7238 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 703-305-3900. 
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